Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f32da3b-35e2-37b1-b145-ebe50a806536.roa
File:                     1f32da3b-35e2-37b1-b145-ebe50a806536.roa (raw, json)
Hash identifier:          eRGSd2kWVbXS7R0lwOBNyKkOoNAPhXgDvhmVSQ27cAE=
Subject key identifier:   17:66:57:BC:82:93:86:AA:B1:9A:E4:5E:46:B3:1A:5C:02:CC:7E:B3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584523B440C0E9137038A4218280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f32da3b-35e2-37b1-b145-ebe50a806536.roa
Signing time:             Fri 08 Mar 2024 12:42:33 +0000
ROA not before:           Fri 08 Mar 2024 12:42:33 +0000
ROA not after:            Thu 06 Jun 2024 11:42:33 +0000
asID:                     20940
IP address blocks:        2600:1408:5000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:b4:40:c0:e9:13:70:38:a4:21:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 12:42:33 2024 GMT
            Not After : Jun  6 11:42:33 2024 GMT
        Subject: CN=16f7f8df-41b2-47ad-8efe-c0282b7f94a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:36:c0:2f:4d:06:1f:39:12:69:e3:f5:c0:1e:
                    ee:c1:0d:20:66:89:74:bf:95:b4:69:d1:5d:d9:7b:
                    7d:b8:87:af:8a:50:f8:c1:59:ca:ac:df:85:d3:f5:
                    37:d6:73:7a:e3:38:af:93:69:02:30:21:4e:03:f3:
                    3e:a9:dc:69:9a:19:76:d7:a6:60:9f:50:7d:79:18:
                    b2:73:df:7e:e4:90:7a:2d:0e:23:4e:a6:61:86:46:
                    21:23:b7:14:3e:d6:5b:27:30:54:f2:f7:61:3d:ae:
                    66:0c:4d:e3:29:ed:8b:b5:aa:4e:84:03:02:db:7d:
                    85:c2:04:08:75:41:fc:fc:54:24:8a:24:ad:99:66:
                    93:90:c6:e8:a1:b0:75:a8:f0:62:1d:8e:0e:dd:2d:
                    52:2e:2b:0c:df:5a:71:f6:b6:91:dd:6c:eb:19:00:
                    5f:67:7d:42:39:4c:75:d5:45:ce:27:18:4a:1f:ee:
                    7c:1f:59:46:e7:a4:87:94:88:1d:38:92:e6:1e:e9:
                    cd:01:0c:b1:22:b5:ab:10:d8:b2:29:43:2c:19:a7:
                    95:19:9f:9b:3c:8e:fb:26:9a:de:6e:cb:46:fe:14:
                    0a:33:2e:7d:20:35:b8:fc:33:d9:f0:c9:7d:08:73:
                    3b:ab:54:02:72:21:56:ea:f2:c2:89:2c:c4:c2:cc:
                    0b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:66:57:BC:82:93:86:AA:B1:9A:E4:5E:46:B3:1A:5C:02:CC:7E:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f32da3b-35e2-37b1-b145-ebe50a806536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c8:00:76:fb:ff:79:dc:63:09:2b:11:3c:80:fc:91:e7:78:
         18:9d:5c:f0:dd:16:e9:84:e2:75:f9:17:3d:e2:50:99:f9:14:
         1c:b3:d2:4e:83:d7:69:bb:b6:35:f4:75:7f:34:13:8f:3b:e0:
         f2:02:55:25:37:be:8b:40:ff:10:50:b1:6f:8b:45:da:c5:87:
         29:00:33:a0:26:6d:bb:6b:8d:87:5c:68:be:2b:e4:83:f2:1a:
         3d:31:cf:12:a7:02:cd:cf:96:64:01:40:63:69:c9:35:3f:01:
         92:2e:59:4b:f2:ca:8b:17:56:3a:52:94:93:bd:a0:f4:9c:70:
         3f:bf:5a:a1:d3:ee:76:86:01:15:9a:df:50:b9:58:ed:04:2a:
         21:fe:ce:0d:63:14:18:05:9b:2d:d6:91:2b:a4:8e:3c:b6:ac:
         93:1f:ec:1b:de:69:c6:36:f4:8c:ae:07:84:00:14:f1:c4:83:
         2e:09:c0:21:31:a9:68:b7:26:48:df:41:ac:26:31:2f:d4:42:
         3e:c2:f4:2b:4a:77:d0:59:6b:d9:73:e3:26:54:ea:b4:e0:0a:
         d6:34:2c:28:c9:62:b3:cd:8b:d5:26:61:24:72:9c:ad:d4:f3:
         67:38:b3:9e:1f:df:ff:08:cc:3f:f0:3c:19:10:e0:9a:4a:d3:
         be:c3:94:3d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUjtEDA6RNwOKQhgoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDMwODEyNDIzM1oXDTI0MDYwNjExNDIzM1owLzEtMCsGA1UEAxMk
MTZmN2Y4ZGYtNDFiMi00N2FkLThlZmUtYzAyODJiN2Y5NGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTbAL00GHzkSaeP1wB7uwQ0gZol0v5W0adFd
2Xt9uIevilD4wVnKrN+F0/U31nN64zivk2kCMCFOA/M+qdxpmhl216Zgn1B9eRiy
c99+5JB6LQ4jTqZhhkYhI7cUPtZbJzBU8vdhPa5mDE3jKe2LtapOhAMC232FwgQI
dUH8/FQkiiStmWaTkMboobB1qPBiHY4O3S1SLisM31px9raR3WzrGQBfZ31COUx1
1UXOJxhKH+58H1lG56SHlIgdOJLmHunNAQyxIrWrENiyKUMsGaeVGZ+bPI77Jpre
bstG/hQKMy59IDW4/DPZ8Ml9CHM7q1QCciFW6vLCiSzEwswL3wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBdmV7yCk4aqsZrkXkazGlwCzH6zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWYzMmRhM2ItMzVlMi0z
N2IxLWIxNDUtZWJlNTBhODA2NTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCFAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH7IAHb7/3ncYwkrETyA/JHneBidXPDdFumE4nX5Fz3iUJn5FByz
0k6D12m7tjX0dX80E4874PICVSU3votA/xBQsW+LRdrFhykAM6AmbbtrjYdcaL4r
5IPyGj0xzxKnAs3PlmQBQGNpyTU/AZIuWUvyyosXVjpSlJO9oPSccD+/WqHT7naG
ARWa31C5WO0EKiH+zg1jFBgFmy3WkSukjjy2rJMf7BveacY29IyuB4QAFPHEgy4J
wCExqWi3JkjfQawmMS/UQj7C9CtKd9BZa9lz4yZU6rTgCtY0LCjJYrPNi9UmYSRy
nK3U82c4s54f3/8IzD/wPBkQ4JpK077DlD0=
-----END CERTIFICATE-----
Generated at Fri May 17 01:57:47 2024 by rpki-client on console-fra.rpki-client.org